Sierrawireless Airlink Es450 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Sierrawireless Airlink Es450 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2018-4061 — CVSS 8.8 (high): An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW…
• CVE-2018-4066 — CVSS 8.8 (high): An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A…
• CVE-2018-4070 — CVSS 8.8 (high): An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless…
• CVE-2018-4071 — CVSS 8.8 (high): An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless…
• CVE-2018-4072 — CVSS 8.8 (high): An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless…
• CVE-2018-4073 — CVSS 8.8 (high): An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless…
• CVE-2018-4062 — CVSS 8.1 (high): A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd outside…
• CVE-2018-4069 — CVSS 7.5 (high): An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3…
• CVE-2018-4064 — CVSS 7.1 (high): An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450…
• CVE-2018-4067 — CVSS 6.5 (medium): An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink…
• CVE-2018-4065 — CVSS 6.1 (medium): An exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi functionality of Sierra Wireless AirLink ES450…
• CVE-2018-4068 — CVSS 5.3 (medium): An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A…